Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pd-admin before 4.17 allow remote authenticated users to inject arbitrary web script or HTML via 1 the WebFTP Overview "Create new directory" field or 2 the body of an e-mail autoresponder message...

PT-2013-2116

Name of the Vulnerable Software and Affected Versions pd-admin versions prior to 4.17 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via the WebFTP Overview "Create new directory" field or the body of an e-mail autoresponder...